ChatGPT share-link chain let attackers run script in signed-in sessions
OpenAI rated the issue P1, paid a $5,000 bounty, and blocked the cross-frame MathLive messages on both web frontends by October 26.
72
Malware
NetSupport RAT
- Mentions · 7d1
- Mentions · 30d4
- All mentions5
- First seenAug 19, 2026
- Last mentioned1d ago
Timeline
5 articles · newest firstStorm-1865 used ClickFix and Booking.com lures against hotels
Fake CAPTCHA pages pushed mshta commands that installed stealers and RATs; Booking.com says its own systems were not breached.
36
Roundup cites infostealers, malicious packages and ClickFix as rising malware trends
Immersive says Lumma Stealer, StealC and RisePro now account for 75% of stolen credentials sold for initial access.
34
Fake ChatGPT, Gemini, and Claude Ad Portals Capture Credentials and MFA Codes
A phishing platform spoofs AI ad portals for ChatGPT, Gemini, and Claude to steal credentials and MFA codes.
67
Post-DEF CON Phishing Uses Malicious Google Doc to Deliver Malware
Huntress uncovered post-DEF CON phishing via X direct messages using a malicious Google Doc to deliver AMOS and NetSupport RAT malware.
42
Appears with
- OpenAIvendor · 2
- Lumma Stealermalware · 2
- ChatGPTproduct · 2
- GitHub Actionsproduct · 1
- StealCmalware · 1
- Huntressvendor · 1
- NodeStealermalware · 1
- Museproduct · 1
- Booking.comproduct · 1
- HuggingFaceproduct · 1
- MathLiveproduct · 1
- CastleLoadermalware · 1
- Claudeproduct · 1
- AsyncRATmalware · 1
- Perplexityorganization · 1
- Shai-Huludmalware · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.